Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the safety profile (readOnly, idempotent, closed-world, non-destructive), yet the description still adds real behavioral context: results include summaries/outcomes, citations and uncertainty, missing actions or outcomes stay unknown, and past outcomes are not predictive. The one gap is that it never explains the ownership scoping as a hard filter versus a hint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.